Hello NATHAN TWHITE and welcome to the Microsoft Community!
Thank you for your feedback, it was a pleasure assisting you with this issue!
Your issue may be caused by an incorrect BIOS configuration or an incompatibility with your system's boot mode and hard disk partitioning.
Secure Boot is in direct conflict with CSM (Compatibility Mode Support)!
Therefore, the problem may be related to the fact that the system is currently running in an older BIOS boot mode (Legacy Boot).
You may refer to the following solutions
Method 1: Check the system partition type
Windows 11 requires the system partition to use GPT (GUID Partition Table) instead of MBR (Master Boot Record), and Secure Boot is only supported in UEFI mode under GPT partition. If your hard disk partition is MBR, the system may revert to CSM (Compatibility Mode Support) when Secure Boot is enabled.
Steps to check the partition type:
- Press Win + X and select Disk Management.
- Locate your system disk (usually the disk called “C:”).
- Right-click on the system disk and select “Properties”.
- Go to the Volumes tab.
- View the partition style: If it is GPT, the partition type is compatible. If it is MBR, the partition needs to be converted to GPT.
Method 2: If the partition is MBR, how to convert it to GPT?
- Backup data: Partition conversion may lead to data loss, it is recommended to backup important files in advance.
- Use MBR2GPT utility (no data loss): Open a command prompt (run as administrator). Enter the following command:
mbr2gpt /validate
- If the validation input is passed:
mbr2gpt /convert
- Reboot the system and enter the BIOS.
Method 5: Setting the boot mode in BIOS
After making sure the hard disk partition is in GPT format, you need to set up UEFI and Secure Boot in BIOS correctly.
BIOS setup steps:
- Reboot your computer and enter the BIOS (keep pressing the Del key during startup).
- Find Startup/Boot Setup and make the following changes: Set CSM Support to Disabled. Set the Boot Mode to UEFI Only.
- In the Secure Boot menu, find the following options: Make sure Secure Boot is set to Enabled. Set the Platform Key mode for Secure Boot to Standard or Custom, and clear and load the default key if you wish.
- Press F10 to save and exit.
Disclaimer: If you will still try to modify the BIOS settings, please backup your important data first.
We look forward to hearing from you again!
Kirito|Microsoft Community Support Specialist